Welcome to Blumira Briefings, your top headlines and trends for your security practice.

This week's episode:
- Salesforce warns that a threat campaign is exploiting overly permissive Experience Cloud guest configurations to harvest data from public portals.
- Cybersecurity researchers have discovered five malicious Rust crates that masquerade as time-related utilities to transmit .env file data to the threat actors.
- The Iranian cyberattack on Stryker is the kind of stress test that business continuity and disaster recovery programs often do not plan for.

--

Have a security topic you want us to cover? Let us know in the comments!

--

Sources:
Overly permissive ‘guest’ settings put Salesforce customers at risk:
https://www.csoonline.com/article/4143667/overly-permissive-guest-settings-put-salesforce-customers-at-risk.html
--
Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets
https://thehackernews.com/2026/03/five-malicious-rust-crates-and-ai-bot.html
--
Why Stryker's Outage Is a Disaster Recovery Wake-Up Call
https://www.darkreading.com/cybersecurity-operations/stryker-outage-disaster-recovery-wake-up-call